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Overview of the HP Domain Enterprise 
Server Operations Manager 

HP Domain Enterprise Server Operations Manager (hp desop) is a 
central operations and problem-management product for distributed 
multi-vendor systems, hp desop uses HP OpenView IT/Operations 
Special Edition (ito-se) to provide: 

• central message-management for consolidation, simplification and 
automation of message processing 

• central monitoring for proactive problem resolution 

• central problem-management for problem notification, resolution and 
tracking 

• central control for efficient management 

The DESOP management server does not support C2 security. 
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In This Book 

This guide provides expianations to heip you better understand and use 
HP Domain Enterprise Server Operations Manager. The guide is 
organized asfoiiows: 


Chapter 1 "i ntroducing HP Domain Enterprise Server Operations 
Manager" provides a brief description of H P Domain 
Enterprise Server Operations Manager's functionaiity. 

Chapter 2 "Understanding desop's Structure"describes how 
DESOP functions, how desop is structured and how 
messages are processed. 

Chapter 3 "Performing Daiiy Tasks" contains descriptions of the 
environment and probiem-soiving techniques. 
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Introducing HP Domain Enterprise Server Operations Manager (DESOP) 


I n This Chapter 

This chapter introduces desop's basic concepts, and includes sections 
describing: 

• central control and management 

• managing messages 

• managing problems 
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An Overview of the HP Domain Enterprise Server Operations Manager 


An Overview of the HP Domain 
Enterprise Server Operations Manager 

HP Domain Enterprise Server Operations Manager (desop) is a software 
application that provides central operations and problem management. 
HP DESOP uses HP OpenView IT/OperationsSpecial Edition (ito-se). The 
management solution: 

• increases the uptime of computing resources 

• reduces the amount of problems through preventive actions 

• decreases the time needed to resolve problems 

• helps to reduce the cost of managing the client-server environment 

DESOP is a very flexible solution that can be configured to meet the 
requirements of any I nformation Technology (IT) organization and its 
users. 

Central Operations and Problem Management 

HP Domain Enterprise Server Operations Manager (desop) consists of a 
central management node which interacts with intelligent 
software-agents installed on the managed systems (called nodes). 

Management status information, messages, and monitoring values are 
collected from such sources as: 

• system or application log files 

• SNMP variables 

Filters and thresholds are applied, and the information isthen converted 
into a standard format for presentation to the central management node. 
Although the information is extracted from different sources, desop 
ensures that it is presented in a consistent format. Therefore, regardless 
of the information's source, operators can respond using consistent and 
intuitive procedural steps. This results in: 

• sh orter I ea r n i n g per i ods for oper ators 

• increased system management efficiency 

• reduced need for system application specialists 
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Introducing HP Domain Enterprise Server Operations Manager (DESOP) 

An Overview of the HP Domain Enterprise Server Operations Manager 


Once the information is retrieved, desop can immediately initiate 
corrective actions, and provide individual guidance for problem 
identification and further problem resolution. There are many ways of 
starting corrective actions in response to these events. For example. 
Automatic Actions can be started without operator intervention upon 
receipt of an event. Alternatively, operator-initiated Actions may be 
predefined and started by the operator in response to a message. 

All operator-driven actions, planned daily tasks, and responses to events, 
are initiated from the central management node, and event-specific Help 
Text and I nstructions lead the operator through the problem resolution 
process. This makes solution implementation simple and fast. These 
capabilities result in both improved productivity through management 
task automation, and reduced errors during problem solving. 
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Managing Problems 

DESOP helps you to solve system- as well as network 
management-related problems. These problems can occur anywhere 
within a distributed environment, desop notifies operators that a 
problem has occurred, then provides the resources required to resolve it. 
The standard elements of problem management are: 

• Identification—observing the environment. 

• Notification—becoming awareof the problem, desop notifies 
operators of problems by displaying messages and their attributes, 
including severity, in the "ITO-SE" window. 

Operators see at a glance the severity of the problem and the affected 
object. They can usethe "Message Properties" window to review every 
detail about the problem and resolve it. 

• Analysis—understanding the problem and its cause. In large 
environments, it is crucial tobeableto pinpoint problems quickly. 

• Solution—determining how to solve the problem 

• Resolution—starting a corrective action to resolvethe problem, desop 
provides the fol low! ng: 

• Automatic actions: These do not require operator intervention. 
These actions implement corrective responses automatically, 
immediately upon receipt of the message. The operator can 
quickly determine the status of the action. 

• Operator-initiated actions: The operator reviews the message 
and then starts the corrective action. 

• Specific problem-resolution instructions: These instructions are 
displayed in the "I nstructions" and "Message Properties" windows 
to assist operators in resolving the problem. 

• Tracking—closing the problem. 
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Introducing HP Domain Enterprise Server Operations Manager (DESOP) 

Managing Problems 


Daily Operations and Problem Management 
Procedure 

DESOP gathers the elements of daily operations and problem 
management into this simple procedural flow: 

1. Collecting 

Gathering the information for assessing the status of the computing 
environment. 

2. Processing 

Selecting important or critical status information and making it 
aval I able to the management server. 

3. Presenting 

Making the information visible, highlighting problems, and defining 
problem resolution. 

4. Executing 

Performing planned activities and corrective actions, storing 
information and action logs. 
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Understanding DESOP's Structure 


I n This Chapter 

This chapter describes desop's basic elements and capabilities, 
including: 

• understanding events, messages, and actions 

• architecture 

• message flow 

• action flow 
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Understanding DESOP's Structure 

Understanding How DESOP Functions 


Figure 2-1 


Understanding How DESOP Functions 

DESOP's objective is to monitor, control and maintain systems, desop 
performs its tasks by managing: 

• events—any occurrence 

• messages—reports of events 

• actions—responses to messages 

The foil owing diagram shows a pictorial representation of this sequence. 

Events, Messages and Actions 



DESOP uses events, messages, and actions to: 

• observe and control status 

• formulate and provide information 

• prohibit or react to and correct problems 
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Understanding DESOP's Structure 

Understanding How DESOP Functions 


Events 

An event is a change in status, a particular cxccurrence, or an incident 
within the computing environment, that occurs on an object. Typically, 
an event represents either a change in status, or a threshold violation. 
For example, the status of a printer changes when the paper tray 
empties. Or, a threshold is violated when the available disk space falls 
below a certai n level. E ach of these occurrences are events, and for each 
event a message can be created. 

Many events represent problems which must be corrected, but not all 
events are problems. For example, when a user logs on or off a system, 
the status of the system changes, and an event occurs. H owever, i n 
general this event requires no action on the part of an operator. 

Messages 

Messages are structured pieces of information, created by events, desop 
intercepts and collects messages, and thereby is informed of events. 
Messages can be any length, from a few bits to a complete event 
description. 

DESOP intercepts messages from the foil owing sources: 

• Logfiles— DESOP encapsulates logfiles of applications and systems, 
extracts message information and checks their status. 

• Monitored objects—you can set up threshold levels for monitored 
objects. When measured values of monitored objects exceed 
configured threshold levels, desop will create messages. 

After intercepting a message, desop can completely restructure it, for 
example, to present the message to the operator in an understandable 
format, or tochangetheseverity of the event. For messages which report 
problems, actions to resolve the problem can be defined. 
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Understanding DESOP's Structure 

Understanding How DESOP Functions 


Figure 2-2 


Understanding How Messages are Processed 

DESOP uses messages to perform the following tasks: 

• communicate information about events 

• let the operator detect status changes within the environment 

• start corrective actions 

DESOP's message handling processing steps are shown in Figure 2-2 and 
described below. 

Message Processing Flow 



1. The messages are i ntercepted on the managed node accordi ng to the 
conditions defined. 

2. The managed node records the messages in a local database. 

3. The managed node tells the central management node the highest 
severity in its local database. The central management node shows 
this information to the operator. 

4. The operator requests the central management node to show the 
messages for the managed node. 

5. The central management node shows the messages i n the managed 
node's local database. 

For more information about how the operator responds to messages, see 

Chapter 3, "Performing Daily Tasks." 
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Understanding DESOP's Structure 

Understanding How DESOP Functions 

Managing Messages 

DESOP's message management features can combine messages into 
logically related groups. A message group bri ngs together messages from 
lots of related sources, providing status information about a class of 
managed objects or services. For example, the message group BACKUP 
can be used to gather all backup related messages, from sources such as 
backup applications and tape drives. The message groups are predefined. 

Actions 

An action is a response to a message. I f the event creati ng the message 
represents a problem, an action can be started to correct it. An action can 
be a shell script, program, command, application start, or any other 
response required. 

These actions are preconfigured by theoESOP administrator as responses 
to specific messages. There are two types of message-bound actions: 

• operator-initiated—theoperator reviews the message, then starts the 
action 

• automatic—these actions begin automatically when the message is 
received 

Following are examples which focus on automatic and operator-initiated 
actions to show what happens to a message when such an action is 
configured. 
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Understanding DESOP's Structure 

Understanding How DESOP Functions 


Figure 2-3 


Automatic Actions 

Automatic actions are message-bound, preconfigured responses to 
problems. Automatic actions do not require operator interaction, and 
DESOP starts them as soon as a message is received. 

Starting an Automatic Action 




As shown in Figure 2-3, automatic actions are processed as follows: 

1. The message is intercepted and stored on the managed node 
accordi ng to the conditions defined. 

2. The action is started locally. Automatic actions can only execute on 
the local node. 

3. I f the message has been so configured, annotations about the 
execution of the automatic action are stored on the manage node. 

4. The operator requests the central management node to show the 
messages for the managed node. 

5. The central management node shows the messages and annotations 
stored on the manage node. 
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Figure 2-4 


Understanding DESOP's Structure 

Understanding How DESOP Functions 


Operator-Initiated Actions 

Operator-initiated actions are also message-bound, preconfigured 
responses to problems. These actions are started by an operator. 
Operator-initiated actions are configured for a message instead of an 
automatic action because of the following: 

• The operator might have to perform manual operations in conjunction 
with the action. 

• The starting of the action might be contingent upon conditions within 
the environment which must first be checked by the operator. 

Starting an Operator-Initiated Action 



As shown in Figure 2-4, an operator-initiated action is processed as 
follows: 

1. The message is intercepted on the managed node according to the 
conditions defined. 

2. The message is stored locally on the managed node. 
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Understanding DESOP's Structure 

Understanding How DESOP Functions 


3. The operator requests the central management node to show the 
messages for the managed node. 

4. The central management node shows the message on the manage 
node. A message attribute indicates that the message has a 
preconfigured operator-initiated action. 

5. The operator starts the action. 

6. The central management node requests the managed node to start 
the action. 

7. If configured, annotations about the execution of the 
operator-initiated action are stored on the managed node. 

8. The central management node shows the annotations. 
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Figure 2-5 


Understanding DESOP's Structure 

Understanding How DESOP is Structured 


Understanding How DESOP is 
Structured 

Two important elements of desop's architecture are: 

• the central management node, and 
< managed nodes. 

One system is designated as the central management node. By default, 
the central management node also serves as a managed node. This 
structure is shown in Figure 2-5. 

DESOP'S Global Architecture 
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Understanding DESOP's Structure 

Understanding How DESOP is Structured 


The Central Management Node 

The central management ncxde performs the central roleof desop. It is 

here that data from the managed nodes is displayed. There is one central 

management node per desop installation, and its basic tasks include: 

• displaying data from managed nodes 

• storing configuration data about the managed nodes in the node bank 

Managed Nodes 

The agent software's basic capabilities include: 

• Message interception—IogfiIe and desop interface messages are 
intercepted on the managed node. 

• Message filtering—messages are compared to conditions and 
arranged into groups—filters can accept or suppress messages. 

• Message storage—messages are retained in a file. 

• Action execution—actions are executed local Iy. 

• Threshold monitoring—performance values are monitored in 
configurable intervals, and messages can be generated when 
performance varies from limits. 


Chapter 2 


29 




Understanding DESOP's Structure 
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Central Control and Monitoring 

Managing status information and resolving problems means that 
operators must have both control over defined environments, and direct 
access to systems from a central management station. 

Central monitoring of the environment provides real-time and proactive 
problem solution procedures, desop provides a variety of monitoring 
techniques: 

Threshold Monitoring 

The DESOP administrator selects critical variables within the 
environment, and defines acceptable limits called thresholds for each 
object. These thresholds can be minimum or maximum values. 

System-alive Monitoring 

DESOP checks that each managed node is operating. 

Self Monitoring 

DESOP monitors its own operations and verifies that all elements of 
DESOP are operating correctly. 
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Performing Daily Tasks 


I n This Chapter 

This chapter gives operators an insight into their daily tasks using 
DESOP, including: 

• reviewing their environment 

• managi ng thei r envi ronment 

• exami ni ng message attri butes 

• using the DESMS log file 

• using the DESMS trace file 

• solving problems and evaluating an action's results 

• closing messages 
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Performing Daily Tasks 

Reviewing Your Environment 


Figure 3-1 


Reviewing Your Environment 

Your working environ merit comprises the foil owing primary components: 

• "Node Bank" window 

• "I TO-SE" window 

Node Bank 

A node icon is a physical representation of a particular operator's 
managed objects. You can use the window to configure each managed 
node and the central management node. 

Managed Nodes Window 


Node Bank 


hpntc40.cup.hp.com 

hpntc95.cup.hp.com 



Modify 


Delete 
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Performing Daily Tasks 

Reviewing Your Environment 


ITO-SE 

Figure 3-2 ITO-SE Window 



You use this window to review the status of managed nodes, manage 
messages, and guide problem resolution. A managed node hierarchy is 
displayed with node icons that are colored according to each node's 
status. I ncoming messages are displayed with pre-configured attributes 
and with status information. You can look at all the details about a single 
message and initiate an operator-initiated action to resolve the event 
that triggered a message, or desop can perform an automatic action for 
you. Finally, you can delete messages for which actions have been 
completed in the "ITO-SE" window. 
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Managing Your Environment 

Your primary daily desop tasks are: 

• keeping the environment (systems and applications) operational 

• receiving notification about changes in status and about events 

• managing messages 

With DESOP, you can provide higher service levels and reduce the time 
you spend doing simple, repetitive tasks. You use messages to observe 
the activities of your managed nodes. You can detect problems at early 
stages of development and take corrective actions before problems 
become critical and impact end users. You select from multiple tools, 
information sources, and problem-solving techniques to resolve 
problems. You maintain a complete history database for all problems you 
have resolved. 
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Managing Your Environment 


Resolving Problems 

Problem resolution and message management are closely linked. A 
message is your key to fully understanding the problem and develop! ng a 
solution. 

Figure 3-3 The Components of Problem Resolution 

1 2 3 4 



The major areas of problem resolution are shown in Figure 3-3, and are 
briefly described here. They are discussed in detail in the following 
sections of this chapter. 


1. Notifying: You detect the problem. 

2. Investigating: You examinethe problem, determine where and what 
has occurred, and develop a plan to solve it. You can take advantage 
of pre- defined Event help instructions. 

3. Solving: You correct the problem. Automatic actions don't require 
your intervention, but you choose when and where to start other 
actions. After finish! ng the actions you review the problem—have the 
actions corrected the problem? 

4. Closing: You close the problem and deletethe message from ITO-SE. 
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Notifying and Investigating 

You use the "ITO-SE" window to review node status and messages, 
detect problems, and direct problem management activities. This 
window notifies you about what has happened and where the problems 
are. 

The first source you can use to learn of a problem is the "ITO-SE" 
window. The window shows you: 

• what has happened 

• how serious it is 

Reviewing Node Status 

The "ITO-SE" window displays a hierarchy of managed nodes that shows 
the status of each managed node. Each node's icon is colored according to 
the most severe message for the node. Use the node hierarchy to decide if 
you want to view the messages for a particular node. 

Examining Message Attributes 

The "ITO-SE "window's key information is contained in the section of the 
window displaying messages. Each line of the message buffer displays a 
single message and its attributes. Reading and understanding the 
attributes is as important as reading the message text. The message 
attributes tell you about: 

• message severity 

• message flags 

• time created on a managed node 

• node name 

• application that created the message 

• message group 

• object 

The attributes appear across the Browser Headline. The message 
displays a value beneath each attribute. 
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You can select a single message to delete. You can also select a single 
message to get more detailed information about it (the message number 
and time received), view any actions configured for the message and the 
status of the action, and view any message instructions. 

You can also delete all of the messages. 

Reading the Browser Headline 

The following are attributes and descriptions of items that appear in the 
browser headline: 

Browser 

Headline Description 

M essages on 

node N ame of the system on which the message(s) are 

created. 

Severity The relative i mportance and status of the message. 

To comply with telecom standards, desop recognizes 
six severity levels described below: 


Severity 

Level... 

is color 
coded... 

and means that... 

Critical 

Red 

a service-affecting condition has occurred and 
immediate corrective action is required 

Major 

Orange 

the severity of the problem is relatively high and 
normal use of the object is likely to be impeded 

Minor 

Yellow 

a problem of relatively low severity has occurred, 
which should not impede normal use of the object 

Warning 

Cyan 

a potential or impending, service-affecting fault 
has occurred. Action should betaken to diagnose 
and correct the problem 

Normal 

Green 

message output is expected: for example, a 
process is starting or completing, or status 
information is displayed 

Unknown 

Blue 

the severity level cannot be determined 
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MessageFlags Indicate the presence of an unmatched message, 
operator instructions, an automatic action, an 
operator-initiated action, and annotations. 

The following is a description of the flags: 


U U nmatched M essage. An unmatched message does 
not match any of the filters defined for a message 
source. Filters are sets of conditions which 
configure desop to accept or suppress messages. 
These messages require your special attention 
because they can represent problems for which no 
preconfigur^ action exists. I n general, you should 
inform the desop administrator of unmatched 
messages so that s/he can i mprove the 
corresponding message or suppress conditions. 

I Operator I nstructions. I nstructions help you 

resolve the problem. If available, these instructions 
are displayed in the "Message Properties" and the 
"Message I nstructions" windows. 

A Automatic Action. I ndicates that an automatic 
action has been configured for the message and 
gives the status of the action. The value of the 
attribute tel Is you if the action: 

S was successful 

F has failed 

R is running 

0 Operator-1 nitiated Action. I ndicates that an 

operator-initiated action has been configured for 
the message and gives the status of the action. You 
start these actions after reviewing the message. 
The value of the attribute tel Is you if an action is: 

X available 
S successful 
F failed 
R running 

N Annotations. I ndicates if annotations exist for this 
message. 
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Date 

Time 

Application 
Message Group 

Object 

Message Text 


Date the message was created. 

The ti me of day the message was created. 

Name of the application that created the message. 

Name of the message group to which the message 
belongs. 

N ame of the object which was affected by, detected, or 
caused the problem. 

The text of the message that was created. 


The "M essage P roperties" wi ndow dispi ays one of the fol lowi ng: "General 
Information,""MessageText,""Original Message,""Actions," 

"I nstructions," or "Annotations."These windows can be reached by 
selecting a message and using the tool bar, the message pop-up menu, or 
the Actions Menu. 


General I nformation. This window displays general information 
about the message such as the name of the system on which the message 
was created and the name of the appi ication that created the message. 


Figure 3-4 
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Actions. This window displays the command and status for automatic 
and operator-initiated actions. 


Figure 3-7 



Command is the command to run. 


Status is the status of the given command and can be one of five values: 
started, successful, failed, defined, and none. 
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Instructions. This window displays any recommended actions to take 
for the message that was created. 


Figure 3-8 
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Annotations. This window displays output from automatic or 
operator-initiated operations. 


Figure 3-9 
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Figure 3-10 
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Using the DESMS Log File 

UsetheDESMS log file to find DESMS internal log messages. 

DE SMS Log File Window 
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To view another log file, select the "Select Log File" button in the tool bar. 
Entries are logged into the 

/ var/ opt/hpwebsuite/hpwebadm/conf/log/ de sms log file by 

default. You can specify your own log file, but for the file to be viewable 
by DESMS, it must be in the 

/ var/ opt/hpwebsuite/hpwebadm/conf/log directory. 
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Using the DESMS Trace File 

Use the DESMS trace file to find DESMS internal trace messages. 


Figure 3-11 



To view another trace file, select the"Select Trace File" button in the tool 
bar. 


Entries are logged into the 

/ var / opt/hpwebsuite/hpwebadm/conf / trace/ de sms trace file by 

default. You can specify your own log file, but for the file to be viewable 
by DESMS, it must be in the 

/ var/ opt/hpwebsuite/hpwebadm/conf/trace directory. 
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Solving Problems 

After you have been notified of a problem and have investigated it, the 
following tools are aval I able to help you solve it: 

• automatic actions 

• operator-initiated actions 

• operator instructions 

Evaluating an Action's Results 

To maintain a current and accurate overview of the computing 
environment, you must know the status and results of actions. An 
action's status is the availability and current state of the action, and 
tells you: 

• if an action has been configured for the message 

• if the action has been successful ly completed 

Reviewing action-availability is part of your initial investigation of 
problems. You review the "Message Properties" window to determine the 
availability of automatic or operator-initiated actions. 

Evaluating act ion-results is part of solving problems. Actions might not 
always be successful in resolvinga problem. Use thefollowing guidelines 
to check an action's result: 

• Review the message's annotations. If configured to do so, desop 
automatically writes the action's stdout and stderr as annotations for 
automatic and operator-initiated actions. 

Reviewing Automatic Actions 

Automatic actions may be configured for many messages. These actions 
are then started as soon as the event is detected. 

The operator can review a message's automatic action by selecting the 
"Message Properties" button from the tool bar. See the section "Reading 
the Browser Headline" on page 38. 
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After an action has completed, the operator can review the results to 
assure that the problem has been corrected. If automatic annotations are 
configured for the message, the operator can review the results of an 
automatic action by reading the message's annotations. The actions 
stdout and stderr are logged as annotations with the message. 

Performing Operator-1 nitiated Actions 

Operator-I nitiated actions are configured for messages where automatic 
actions are inappropriate. For example, actions or programs requiring 
too much CPU should not be started without first evaluating system load 
factors and requirements. For these types of actions, an operator's 
intervention and control are necessary. 

The operator can review a message's operator-initiated action by 
selecting the "Message Properties" button from the tool bar. Seethe 
section "Reading the Browser Fleadline"on page 38. 

You start the action by clicking on the message and choosing the Perform 
Actions button. After an action has completed, you review the results to 
assurethat the problem has been corrected. If automatic annotations are 
configured for the message, you can review the results of an 
operator-initiated action by reading the message's annotations. The 
action's stdout and stderr are logged as annotations with the message. 

Performing Operator Instructions 

I nstructions may be configured for a message, to help you solve a 
problem. Typically, these might: 

• Describe an automatic action. (See the section "Reviewing Automatic 
Actions" on page 46.) 

• Give details of how you should perform an operator-initiated action. 
(See the section "Performing Operator-1 nitiated Actions" on page 47.) 

• Describe any manual steps required for solving a problem. (For 
instance, "Start Application X"). 

You can do this by writing an instruction text to accompany a message. 
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Closing Messages 

After you have completed work on a message, you remove the message 
from the "ITO-SE" window. To do this, delete the message. 
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